has_secure_password is not an "auth module". That's simply a handy function to handle a password attribute... which an actual auth module can make use of if it

has_secure_password is not an "auth module". That's simply a handy function to handle a password attribute... which an actual auth module can make use of if it desired.